Behavioral task
behavioral1
Sample
3d8e1d5e5b9458b64b0c1f03fc4d1ae9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3d8e1d5e5b9458b64b0c1f03fc4d1ae9.exe
Resource
win10v2004-20231215-en
General
-
Target
3d8e1d5e5b9458b64b0c1f03fc4d1ae9
-
Size
1.3MB
-
MD5
3d8e1d5e5b9458b64b0c1f03fc4d1ae9
-
SHA1
070afd79e75300cd291bd0abdc946c7df4ce823c
-
SHA256
b047ec9b17d9d77afd27a1b78bb7126de37df1d3d2ba26754bf7b3febaf257f2
-
SHA512
2d42fa14ac3d944eb312fd239f7eb0c5fc58a2b5817ac4ec669de00538bd5e673535817a4ea56a98f1f3bd0a30ee510ca34a81f65e2f737e863b4979a7aaeced
-
SSDEEP
24576:Aa5gAXsvIWn7ZeeXogLwzokmJQ7RhyEAqzQPmdmmstwLyvDCbhJugHKl7GOX8qJ:AaxpW7ZeeXFim20HmowLXbWvPJ
Malware Config
Signatures
-
resource yara_rule sample themida -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3d8e1d5e5b9458b64b0c1f03fc4d1ae9
Files
-
3d8e1d5e5b9458b64b0c1f03fc4d1ae9.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 138KB - Virtual size: 928KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Themida Size: 1.1MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE